$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573a7afe-7c89-46e3-b222-37958ce5e554.roa File: 573a7afe-7c89-46e3-b222-37958ce5e554.roa (raw, json) Hash identifier: EONCazMF1uwrnpw0XIxuuM/59hzXkeXzpOH22hquG+w= Subject key identifier: BB:74:55:9D:4F:B9:8E:EE:B7:3A:09:3D:82:27:11:AF:D4:40:03:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51BB59A3795B66B86E3B8D8F99D6D37FD7C255AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573a7afe-7c89-46e3-b222-37958ce5e554.roa Signing time: Tue 28 Apr 2026 00:31:19 +0000 ROA not before: Tue 28 Apr 2026 00:31:19 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 147.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bb:59:a3:79:5b:66:b8:6e:3b:8d:8f:99:d6:d3:7f:d7:c2:55:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:31:19 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=be161313776312c78ca9efb84ff1ed280af68556541d8d84d6ebd9dc87b8f8c0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:8e:fd:20:b2:7d:88:82:7a:be:10:da:4d: 4f:4e:d5:1a:ac:49:0c:5c:a3:12:ba:7c:50:31:06: da:56:5f:b9:d2:8a:5b:49:4d:79:d4:88:50:4b:25: a3:77:42:b4:02:4e:c2:87:d3:f6:c3:b9:d5:b1:c8: dd:0e:38:8f:7b:c5:a9:44:41:f0:0b:4e:a7:ba:76: 70:c9:ae:1f:ee:d4:fd:3e:d4:d8:b8:e4:62:94:a6: 60:4f:4d:d6:4f:d7:0e:fb:ff:93:32:bf:ee:b7:14: 76:38:5e:c9:c2:02:c4:aa:a5:53:90:7d:10:8b:7c: 90:94:c3:f4:83:61:94:dd:af:64:c3:51:3a:0a:c5: 20:e2:61:95:0f:6d:ba:64:0b:0e:66:84:e0:19:65: a3:ff:ce:d4:34:6a:32:5b:72:1a:8d:c8:e7:e3:f7: 17:fd:eb:db:e8:81:1c:28:fa:b4:9b:f4:62:87:7d: ae:36:36:70:17:30:39:6d:f0:9b:f3:01:03:6a:ee: a1:1a:f3:db:ab:5b:00:08:5d:26:b0:54:ab:4f:21: e9:10:f9:a7:58:3b:35:ec:b7:7e:3b:f5:b8:c9:b7: 94:d2:ac:b5:45:29:4f:e9:a3:42:9b:57:50:2e:48: 41:82:03:ec:2d:be:fe:72:c0:e4:f0:61:60:1a:36: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:55:9D:4F:B9:8E:EE:B7:3A:09:3D:82:27:11:AF:D4:40:03:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573a7afe-7c89-46e3-b222-37958ce5e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.2.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:c8:0d:2d:02:f4:85:b7:5c:b7:44:f9:e3:c9:82:c3:33:41: d0:b8:7c:29:3f:e9:b4:ef:80:22:ec:22:59:5c:c5:15:36:f0: 9f:93:40:14:3e:ca:6f:7b:c9:93:5f:5a:01:9f:b0:ef:65:ed: ff:67:08:5a:b9:14:66:6f:20:53:85:eb:f8:de:c3:c9:47:6c: 94:47:ee:50:fd:73:18:bb:37:15:4a:62:f3:9c:bf:14:d2:4e: 13:f7:15:23:af:fd:b5:6c:a7:be:2d:69:bf:cc:f6:33:df:7e: 32:1b:fc:2d:a8:75:e0:40:58:0d:07:95:cc:78:58:a0:6a:2a: 22:7e:90:be:86:78:25:08:e0:e7:be:2a:b5:d2:38:8b:5c:75: da:c8:44:cb:c3:5d:86:0c:5f:b3:fa:e2:98:67:6b:30:ba:b6: 9b:40:ec:d4:72:fc:dd:5d:99:a2:09:ad:ba:e6:2f:2d:28:49: 7c:84:46:73:79:c3:53:d3:98:49:e9:75:40:b0:ac:8e:cf:53: 57:95:17:3c:e8:9c:ce:d2:69:91:bb:cd:16:88:8d:cc:1b:4f: 2e:34:70:c6:b3:b9:d9:ba:2b:b0:bb:97:12:0d:0a:cd:2f:71: 59:39:40:2e:08:df:a4:7b:d5:8e:0f:5d:a5:47:36:23:56:fb: 8c:0f:ae:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUbtZo3lbZrhuO42PmdbTf9fCVa8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMTE5WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTE2MTMxMzc3NjMxMmM3OGNhOWVmYjg0ZmYxZWQyODBh ZjY4NTU2NTQxZDhkODRkNmViZDlkYzg3YjhmOGMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU3o79ILJ9iIJ6vhDaTU9O1RqsSQxcoxK6fFAxBtpWX7nS iltJTXnUiFBLJaN3QrQCTsKH0/bDudWxyN0OOI97xalEQfALTqe6dnDJrh/u1P0+ 1Ni45GKUpmBPTdZP1w77/5Myv+63FHY4XsnCAsSqpVOQfRCLfJCUw/SDYZTdr2TD UToKxSDiYZUPbbpkCw5mhOAZZaP/ztQ0ajJbchqNyOfj9xf969vogRwo+rSb9GKH fa42NnAXMDlt8JvzAQNq7qEa89urWwAIXSawVKtPIekQ+adYOzXst3479bjJt5TS rLVFKU/po0KbV1AuSEGCA+wtvv5ywOTwYWAaNnrvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUu3RVnU+5ju63Ogk9gicRr9RAA7YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3M2E3YWZlLTdjODktNDZlMy1iMjIyLTM3OTU4Y2U1ZTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCTAjANBgkqhkiG9w0BAQsFAAOCAQEAVMgNLQL0hbdct0T548mCwzNB0Lh8 KT/ptO+AIuwiWVzFFTbwn5NAFD7Kb3vJk19aAZ+w72Xt/2cIWrkUZm8gU4Xr+N7D yUdslEfuUP1zGLs3FUpi85y/FNJOE/cVI6/9tWynvi1pv8z2M99+Mhv8Lah14EBY DQeVzHhYoGoqIn6QvoZ4JQjg574qtdI4i1x12shEy8Ndhgxfs/rimGdrMLq2m0Ds 1HL83V2ZogmtuuYvLShJfIRGc3nDU9OYSel1QLCsjs9TV5UXPOicztJpkbvNFoiN zBtPLjRwxrO52borsLuXEg0KzS9xWTlALgjfpHvVjg9dpUc2I1b7jA+upA== -----END CERTIFICATE-----Generated at Sun May 3 14:47:41 2026 by rpki-client